Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Secure MongoDB and Redis #280

Merged
merged 23 commits into from
May 7, 2020
Merged

Secure MongoDB and Redis #280

merged 23 commits into from
May 7, 2020

Conversation

noliveleger
Copy link
Contributor

@noliveleger noliveleger commented May 1, 2020 •
edited
Loading

#266 has been closed by mistake and cannot be reopened

  • New scripts are added to:
    1. create/update root and user for MongoDB
    2. create/update user for PostgreSQL
  • Redis configuration requires a password

This PR is related to kobotoolbox/kobo-install#72

Also closes #249

@noliveleger
Added network for backend and updated frontend images
b7be5c3
@noliveleger
Moved network settings to master and slave composer files
785dff2
@noliveleger
Updated README: security & firewall
77bd82c
@noliveleger
Create authenticated MongoDB user on DB init
7cfd809
@noliveleger
Added password to redis configuration files
9f9e6f2
@noliveleger
Merge branch 'kobo-install-two-databases' into two-databases-secured-…
2ffc651 
…backend
@noliveleger
Use envsub instead of sed to create redis conf
6723091
@noliveleger
Escaped double quote in Redis password
05f45cf
@noliveleger
Updated env files templates
dcf258c
@noliveleger
Added scripts for MongoDB and PostgreSQL that run at boot to update u…
17ee6d2 
…sers credentials
@noliveleger
Merge branch 'kobo-install-two-databases' into two-databases-secured-…
5149fa1 
…backend
@noliveleger
Fixed typo in MongoDB upsert_db_user script
82a65cc
@noliveleger
Ports are not exposed anymore by default:
f34eac2 
- Simplified frontend and backend composer files
- Created samples to help the creation for '*.override' composer files
- Updated README
@noliveleger
Support authentication with MongoDB backups
c2d068a
@noliveleger
Updated postgres toggle backup script
fcbb5d1
@noliveleger
Upgraded S3 backup virtualenv to Python3
6e60e03
@noliveleger
Replaced "which" with "command -v"
eed0a4a
@noliveleger
Use "command -v" instead of harcoded path for "pg_ctl"
c098517
@noliveleger
Fixed typo
128f700
@noliveleger noliveleger marked this pull request as draft May 1, 2020 19:37
@noliveleger noliveleger requested a review from jnm May 1, 2020 20:00
@noliveleger noliveleger self-assigned this May 1, 2020
@noliveleger noliveleger marked this pull request as ready for review May 1, 2020 20:00
@noliveleger noliveleger assigned jnm and unassigned noliveleger May 1, 2020
@noliveleger noliveleger mentioned this pull request May 1, 2020
Merged
@noliveleger noliveleger changed the title Updated documentation for secured-backend Secure MongoDB and Redis May 1, 2020
jnm
jnm requested changes May 4, 2020
View reviewed changes
README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
docker-compose.backend.master.override.yml.sample Show resolved Hide resolved
docker-compose.backend.master.override.yml.sample Show resolved Hide resolved
docker-compose.backend.master.override.yml.sample Show resolved Hide resolved
mongo/entrypoint.sh Outdated Show resolved Hide resolved
mongo/upsert_users.sh Outdated Show resolved Hide resolved
mongo/upsert_users.sh Show resolved Hide resolved
mongo/upsert_users.sh Show resolved Hide resolved
mongo/upsert_users.sh Outdated Show resolved Hide resolved
jnm
jnm requested changes May 7, 2020
View reviewed changes
Copy link
Member

@jnm jnm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll fix the / issues

docker-compose.backend.template.yml Outdated Show resolved Hide resolved
docker-compose.backend.template.yml Outdated Show resolved Hide resolved
@jnm jnm merged commit e2da04e into master May 7, 2020
@jnm jnm deleted the secured-backend branch May 7, 2020 23:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jnm jnm jnm approved these changes

Assignees

@jnm jnm

Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Document that a firewall is required
2 participants
@noliveleger @jnm